oke4d Privacy Policy

oke4d operates as the data controller in respect of all personal data collected through the platform at https://oke4d.bio. As data controller, oke4d determines the purposes for which and the means by which personal data is processed. Where oke4d engages third-party service providers — such as KYC verification partners, payment processors, and game content studios — those entities may act as data processors on oke4d's behalf, processing data only on oke4d's documented instructions and subject to appropriate contractual data protection obligations.

Any queries relating to data protection, the exercise of your rights, or this Policy in general should be directed to oke4d's support team using the contact details set out in Section 14 of this Policy.

oke4d collects the following categories of personal data from Account Holders and prospective users:

2.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification
• Date of birth (used to verify the 21+ age requirement)
• Email address (primary communication channel)
• Mobile phone number (used for account security and WhatsApp support)
• Residential address (city and province within Indonesia — e.g., Jakarta, Surabaya, Bandung, Bali, Medan, Yogyakarta)

2.2 Verification & KYC Data

• Copies of government-issued photo identification (KTP — Indonesian National Identity Card, passport, or SIM driving licence)
• Proof of address documents (bank statements from BCA, BRI, BNI, Mandiri, or CIMB Niaga; utility bills)
• Proof of payment method ownership (screenshots of active e-wallet accounts such as OVO, DANA, GoPay, ShopeePay, or LinkAja)
• Selfie photographs submitted for liveness verification where required by the KYC process

2.3 Financial Data

• Bank account details associated with your registered payment methods (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI)
• E-wallet account identifiers for OVO, DANA, GoPay, ShopeePay, and LinkAja
• Transaction history including deposit amounts, withdrawal requests, and settlement records, all denominated in Indonesian Rupiah (IDR / Rp)
• Bonus credit allocations, wagering progress records, and promotion redemption history

2.4 Technical & Usage Data

• IP address and approximate geolocation (used to enforce jurisdictional access controls and detect fraud)
• Device type, operating system, browser version, and screen resolution
• Session timestamps, page navigation paths, and feature interaction logs
• Game round history, bet amounts, wager outcomes, and RTP session data
• Login timestamps and failed authentication attempts

2.5 Communications Data

• Content of live chat conversations and WhatsApp messages exchanged with the oke4d support team
• Email correspondence sent to or received from oke4d support addresses
• Records of promotional communications sent to your registered email address or phone number, including open and click metrics

oke4d collects personal data through the following channels:

• Direct submission: Data you provide when completing the registration form, the KYC verification process, the cashier deposit or withdrawal flow, or any support interaction.
• Automated collection: Technical and usage data collected automatically when you access the platform, via server logs, session tracking, and first-party analytics tools.
• Third-party providers: Identity verification outcomes shared by licensed KYC partners; transaction status data shared by payment processors and banking partners (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja); fraud-risk signals shared by industry fraud-prevention services.
• Cookies and similar technologies: Data collected via first-party cookies placed on your device during a platform session. Full details are provided in Section 9 of this Policy.

oke4d processes personal data for the following specific and documented purposes:

oke4d processes personal data on the following legal bases, in accordance with internationally recognised data protection principles:

• Contractual necessity: Processing required to register your account, process transactions, and deliver the services described in the Terms & Conditions is necessary for the performance of the contract between you and oke4d.
• Legal obligation: Processing necessary to comply with applicable AML regulations, licensing conditions, and identity verification requirements is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, security monitoring, responsible gaming oversight, and platform improvement is carried out on the basis of oke4d's legitimate interests, which have been assessed as not overriding your fundamental rights and freedoms.
• Consent: Processing for direct marketing communications is carried out on the basis of your consent, which may be withdrawn at any time by contacting the support team or using the unsubscribe option included in all marketing emails.

oke4d does not sell your personal data to any third party under any circumstances. Data is shared only in the following limited and documented situations:

6.1 Service Providers & Data Processors

oke4d engages third-party processors who act strictly on oke4d's instructions and are bound by appropriate data processing agreements. These include:

• KYC & identity verification partners: Receive identity document images and verification requests solely to confirm age and identity. They do not retain documents beyond the verification lifecycle unless required by their own regulatory obligations.
• Payment processors: Indonesian banking partners (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata, BSI) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) receive only the transaction data necessary to process a specific deposit or withdrawal instruction.
• Game content studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft receive anonymised session tokens to facilitate game round delivery. They do not receive personally identifiable information beyond a session identifier.
• IT infrastructure and hosting providers: Server and cloud infrastructure providers that host the oke4d platform and its associated databases, operating under strict contractual data security obligations.

6.2 Legal Disclosures

oke4d may disclose personal data to competent authorities, law enforcement bodies, or regulatory agencies where required to do so by applicable law, court order, or the conditions of its international gaming licence. oke4d will, where legally permissible, notify affected Account Holders of any such disclosure.

oke4d retains personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable legal, regulatory, or licensing obligations. The following retention principles apply:

• Active accounts: All personal data associated with an active account is retained for the lifetime of the account plus a minimum of five years following account closure, in compliance with anti-money-laundering record-keeping requirements.
• KYC documents: Identity verification documents are retained for a minimum of five years from the date of the last transaction on the account, unless a longer retention period is mandated by applicable law.
• Transaction records: Deposit, withdrawal, and wager records are retained for a minimum of five years from the date of each transaction.
• Support communications: Live chat transcripts, email correspondence, and WhatsApp message records are retained for a minimum of two years from the date of the interaction.
• Marketing data: Email and phone number records used for marketing communications are retained until you withdraw consent or opt out, after which they are suppressed (not deleted, to prevent future re-contact in error).
• Technical logs: Server logs and session data are retained for a maximum of 12 months, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with oke4d's internal data lifecycle management procedures.

oke4d implements a layered set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• Encryption in transit: All data transmitted between your device and the oke4d platform is encrypted using 256-bit TLS/SSL protocols. The oke4d site operates exclusively over HTTPS.
• Encryption at rest: Sensitive personal data stored in oke4d's databases — including identity document copies and financial records — is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data is restricted to authorised oke4d personnel who require it to perform their specific job functions. All internal access is logged and subject to regular audit review.
• Two-factor authentication: Account Holders are encouraged to enable two-factor authentication (2FA) on their oke4d accounts. The platform supports 2FA via mobile authenticator apps and SMS-based verification to Indonesian (+62) mobile numbers.
• Fraud monitoring: oke4d operates automated and manual fraud-monitoring systems that analyse account behaviour in real time to detect suspicious patterns, including unusual login locations, rapid large withdrawals, and multi-account activity.
• Data minimisation: oke4d collects only the personal data strictly necessary for the purposes described in this Policy. Data fields that are no longer required are purged on a scheduled basis.

oke4d uses first-party cookies and similar session-tracking technologies to operate the platform, maintain your login session, and collect anonymised usage analytics. oke4d does not use third-party advertising cookies or behavioural tracking pixels from external advertising networks.

9.1 Types of Cookies Used

9.2 Managing Cookies

You may configure your browser to block or delete cookies at any time. Note that blocking strictly necessary cookies will prevent you from logging in to your oke4d account. Browser-level cookie controls are available in the settings menus of all major browsers, including Chrome, Firefox, Safari, and the Samsung Internet browser commonly used on Android devices popular in Indonesia.

As an Account Holder whose personal data is processed by oke4d, you hold the following rights in respect of that data. Requests to exercise these rights should be submitted to the oke4d support team using the contact details in Section 14. oke4d will respond to all valid requests within 30 calendar days.

oke4d is strictly an adults-only platform. Registration and use of the platform is prohibited for any individual under the age of 21. oke4d does not knowingly collect personal data from individuals under 21 years of age. If oke4d becomes aware that personal data has been collected from a minor, that account will be immediately suspended, all personal data associated with the account will be deleted, and any deposited funds will be returned to the originating payment method following identity verification.

Parents and guardians who believe that a minor in their care has registered an account on oke4d should contact the support team immediately via live chat or at [email protected]. oke4d will prioritise such reports and respond within 24 hours.

oke4d's primary target market is Indonesia, and the majority of Account Holders are Indonesian residents. However, as an internationally licensed platform, some of oke4d's third-party service providers — particularly KYC verification partners and IT infrastructure providers — may process or store data in jurisdictions outside Indonesia. Where such transfers occur, oke4d takes appropriate steps to ensure that personal data remains protected to a standard consistent with the principles set out in this Policy, including through contractual data protection clauses and the selection of partners operating in jurisdictions with recognised data protection frameworks.

oke4d does not transfer personal data to jurisdictions with inadequate data protection standards without implementing appropriate safeguards. If you require further information about the specific safeguards applied to international transfers of your data, please contact the support team using the details in Section 14.

oke4d reserves the right to update this Privacy Policy at any time to reflect changes in the platform's data processing practices, applicable legal requirements, or the services offered. Material changes to this Policy will be communicated to Account Holders via email to the registered address on their account, and a prominent notice will be displayed on the platform for a minimum of 14 calendar days before the amended Policy takes effect.

The effective date at the top of this Policy reflects the most recent revision. We encourage Account Holders to review this Policy periodically. Your continued use of the platform following the effective date of any revision constitutes acceptance of the updated Policy. If you do not agree with any change, you may close your account before the revised Policy takes effect by contacting the support team.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by oke4d, please contact our support team through any of the following channels. All privacy-related requests will be acknowledged within 48 hours and substantively resolved within 30 calendar days.

• Email: [email protected] (plain text — not a clickable link)
• WhatsApp: +62 811 0000 4444 (plain text — not a clickable link)
• Live Chat: Available on the platform, 00:00 – 23:59 WIB, every day of the year

When submitting a data rights request, please include your registered email address, account username, and a brief description of your request so that we can verify your identity and locate your records efficiently. oke4d will not process data rights requests from unverified individuals to protect Account Holders against fraudulent requests by third parties.